NEAS[.]31536d050ff0042755c8172f332af680_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.31536d050ff0042755c8172f332af680_JC.exe
Size

60KB
MD5

31536d050ff0042755c8172f332af680
SHA1

c60e452ceaf8e475957cae39d2838168ef030cef
SHA256

59b874ab5a124cb4122d0813458add91d0f747caddf87763b27f42a8b409a2b2
SHA512

c0fe1e0a921c4fc80b57750142ded7cb68862c3feeb117234eecf78a566fd268deb900b44dae956e2eb821e527e4415f3c58e80a9232a2e670f85f97d03af9e0
SSDEEP

1536:0icppOI2z/gAl8X7qqZBvVnDdbtceuT4KBL:0ic+XzoWad5N44M

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.31536d050ff0042755c8172f332af680_JC.exe

Files

NEAS.31536d050ff0042755c8172f332af680_JC.exe
.exe windows:5 windows x86

b892955ae494fe908bdf52e81e1dfa4c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect

user32

EndPaint

advapi32

RegCloseKey

shell32

ShellExecuteA

ws2_32

WSAStartup

iphlpapi

GetAdaptersAddresses

Sections

GSUDUHUW
Size: - Virtual size: 148KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

GSUDUHUW
Size: 57KB - Virtual size: 60KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE